Privacy Policy
TeeTeams (teeteams.com) Last updated: 15 July 2026
1. Who we are
TeeTeams is operated by:
Apz ApS CVR no. 42110892 Gåsebanken 48 DK-4681 Herfølge, Denmark Email: magnus@apzaps.dk
Apz ApS is the data controller for the personal data described in this policy. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
2. What data we collect
2.1 Account holders (trip organizers)
When you create an account or sign in, we collect and store:
- Your name
- Your email address
2.2 Players added by organizers
When an organizer builds a trip and invites players, the organizer may enter the following about each player:
- Name
- Email address
- Phone number
This data is stored in our database and is used to generate the flight plan and to send each player their personal invitation link. If you are a player and believe your data has been entered into TeeTeams, see section 4 and section 9.
2.3 Website visitors
When you visit teeteams.com, we collect usage data through analytics tools (see section 7), and our hosting providers process technical data such as IP addresses in server logs for security and operational purposes.
3. Purposes and legal bases
| Processing | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account data (name, email) | Providing your account, saving your trips and plans | Art. 6(1)(b) — performance of a contract |
| Player data (name, email, phone) | Generating pairings, sending personal invitation links, displaying the plan to the group | Art. 6(1)(f) — our and the organizer's legitimate interest in running the trip |
| Transactional email (invitations, account emails) | Delivering the core service | Art. 6(1)(b) and 6(1)(f) |
| Analytics (Google Analytics) | Understanding how the site is used | Art. 6(1)(a) — your consent |
| Analytics (Plausible) | Aggregated, privacy-friendly usage statistics | Art. 6(1)(f) — legitimate interest |
| Server logs, security | Operating and securing the service | Art. 6(1)(f) — legitimate interest |
| Payments (when introduced, see section 10) | Processing subscriptions/purchases and complying with bookkeeping law | Art. 6(1)(b) and 6(1)(c) |
4. Data entered about other people
TeeTeams lets organizers enter names, email addresses and phone numbers of other people (their fellow players). If you are an organizer, you must make sure you are entitled to share this information with us — in practice, that your players are aware you are organizing the trip and expect to receive an invitation.
We only use player data to provide the service to the group (pairings, invitations, viewing the plan). We do not use player data for marketing, and we do not sell or share it with third parties beyond the processors listed in section 5.
5. Data processors and recipients
We use the following service providers (data processors) to run TeeTeams:
- Supabase — database and authentication. Data is hosted in the EU.
- Vercel Inc. — web hosting and content delivery.
- Resend, Inc. — sending transactional emails (invitations and account emails).
- Google LLC — Google Analytics (usage statistics, only with your consent).
- Plausible Insights OÜ (EU) — privacy-friendly, cookieless analytics.
All processors are bound by data processing agreements as required by GDPR Art. 28. We do not sell personal data.
6. International transfers
Our primary data storage (Supabase) is located in the EU. Some of our providers (Vercel, Resend, Google) are US companies, and processing may involve transfers of personal data to the United States. Such transfers are safeguarded by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (GDPR Art. 46).
7. Cookies and analytics
We use:
- Strictly necessary cookies/storage — for signing in and keeping your session. These do not require consent.
- Google Analytics — sets cookies and collects usage data. Google Analytics only runs if you consent via our cookie banner. You can withdraw consent at any time.
- Plausible Analytics — cookieless, collects only aggregated statistics and does not track you across sites.
8. Retention
- Account data is kept for as long as your account exists.
- Trips, plans and player data are kept for as long as the organizer's account exists, so saved plans remain available.
- Server logs are kept for a limited period for security purposes.
- Payment and bookkeeping records (once payments are introduced) will be kept for 5 years after the end of the financial year, as required by the Danish Bookkeeping Act.
You can at any time request deletion of your account or of data about you — see section 9.
9. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure of your data (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, where processing is based on consent (Art. 7(3))
To exercise any of these rights — including deleting your account, or having your details removed if someone else entered them into TeeTeams — contact us at magnus@apzaps.dk. We will respond within one month.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.
10. Payments
TeeTeams is currently free to use. If we introduce paid features, payments will be processed by Stripe, Inc. We will not store your full card details; Stripe processes payment information as an independent controller/processor under its own privacy policy. This policy will be updated before paid features launch.
11. Security
We use reputable, industry-standard providers, encrypted connections (HTTPS/TLS) and access controls to protect personal data. No system is perfectly secure, but we take reasonable technical and organizational measures appropriate to the risk.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be announced on the website or by email to account holders.
13. Contact
Questions about privacy or this policy: magnus@apzaps.dk
Apz ApS · CVR 42110892 · Gåsebanken 48, DK-4681 Herfølge, Denmark